Open Stack

Hi all,

I deployed an environment with TripleO Ussuri with 3 HA Controllers and
some Compute nodes with neutron-ovn-dvr-ha.yaml
Instances have Internet access through routers with SNAT traffic (in this
case traffic is routed via a controller node), and by assigning IP address
directly from provider network (not having a router).

But in case of assigning FIP from provider to an instance, VM Internet
connection is lost.
Here is the output of router nat lists, which seems OK:


# ovn-nbctl lr-nat-list 587182a4-4d6b-41b0-9fd8-4c1be58811b0
TYPE             EXTERNAL_IP        EXTERNAL_PORT    LOGICAL_IP
 EXTERNAL_MAC         LOGICAL_PORT
dnat_and_snat    X.X.X.X                      192.168.0.153
fa:16:3e:0a:86:4d    e65bd8e9-5f95-4eb2-a316-97e86fbdb9b6
snat             Y.Y.Y.Y                      192.168.0.0/24


I replaced FIP with X.X.X.X and router IP with Y.Y.Y.Y

When I remove * EXTERNAL_MAC* and *LOGICAL_PORT*, FIP works fine and as it
has to be, but traffic routes from a Controller node and it won't be
distributed anymore.

Any idea or suggestion would be grateful.
Regards,
Reza
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20200907/245fc2a4/attachment.html>